Authentication

Create client in Keycloak

  1. Login to the administration console with the admin user.
  2. Go to Clients > Create.
  3. Enter ClientID (of your own choosing) called <CLIENT_ID>.
  4. Click Save.
  5. In Settings for this newly created client:
    1. Disable Standard Flow Enabled.
    2. Disable Direct Access Grants Enabled.
    3. Set Access Type to confidential.
    4. Enable Service Accounts Enabled.
    5. Click Save.
  6. In Service Account Roles for this newly created client:
    1. In Client Roles select appropriate role.
    2. Add role usage-allowed to Assigned Roles.
  7. In Credentials for this newly created client, copy secret to Clipboard (called <CLIENT_SECRET>).

Create user in Keycloak

For <CLIENT_ROLE> choose entitylist-webapp when creating a user for the entity list and choose pseudonymization-webapp when creating a user for the pseudonymization service.

  • Login to the administration console with the admin user
  • Go to Users -> Add user
  • Enter Username (of your own choosing) and additional information (e.g. Name) if applicable
  • Click Save
  • In Role Mappings for this newly created user
    • In Client Roles select <CLIENT_ROLE>
    • Add role usage-allowed to Assigned Roles
  • In Credentials, enter initial password. If the field Temporary is enabled, the user will be asked to change their password on first log in. It is recommended to have this option enabled.

Get Token

Name Value
Token Name Choose any
Grant Type Client Credentials
Access Token URL server:port/auth/realms/trustcenter/protocol/openid-connect/token
Client ID <CLIENT_ID>
Client Secret <CLIENT_SECRET>
Scope -
Client Authentication Send as Basic Auth header